ERM Controls Testing Senior Associate

Northern Trust; Tempe (AZ); On-site; USD 70,000 - 120,000; Full time

Benefits offered by this job

401k and pension

Medical, dental, vision benefits

Paid time off and parental leave

Job summary

Northern Trust in the United States seeks a Second Line of Defense professional to lead controls testing across ERM and Entity Level Controls. You will assess risk programs, validate control design, and report findings to risk committees.

The role emphasizes independent review, governance, and remediation planning, partnering with risk owners to strengthen the control environment and regulatory compliance within a global financial services context.

Qualifications

• 5-7 years of experience in Internal Audit, IT Audit, Risk Management, or related fields.
• Familiarity with Entity Level Controls and risk governance.
• Strong knowledge of ERM frameworks and governance models.

Responsibilities

• Test, validate, and assert control testing methods with documented evidence.
• Perform 2LOD validation, including plan prep, workpapers, findings, and reporting.
• Assess ERM programs across risk lifecycle, including risk identification, monitoring, and reporting.
• Evaluate design and operating effectiveness of Entity Level Controls and governance activities.
• Communicate findings to risk leadership and executives clearly and timely.

Skills

Internal Audit

IT Audit

Risk Management

Enterprise Risk Management

Operational Risk

Compliance

Cybersecurity

IT Risk and Control

Education

CISSP / CISM / CISA / CRISC / CIA or equivalent certifications

Tools

Microsoft Office 365

GRC platforms (ServiceNow, Fusion)

Job description

Northern Trust in the United States seeks a Second Line of Defense professional to lead controls testing across ERM and Entity Level Controls. You will assess risk programs, validate control design, and report findings to risk committees.

The role emphasizes independent review, governance, and remediation planning, partnering with risk owners to strengthen the control environment and regulatory compliance within a global financial services context.